NDP Act (2023) Compliance Checklist

Nigeria Data Protection Act (2023) Compliance Checklist & Tracker | Datori Consulting
GAID 2025 Ready

Master Nigeria Data Protection Act (2023) Compliance with Confidence

A comprehensive reference guide and interactive working tracker designed for C-Suite executives, DPOs, and legal teams to assign responsibility, track readiness, and meet GAID 2025 Obligation.

  • ✓ Dual-part framework with statutory obligations & operational readiness tracker
  • ✓ Assign Responsible Officers & track live status across core compliance modules
  • ✓ Editable PDF export preserving form data for management & regulatory reporting

High-Stakes Compliance Risk & Regulatory Penalties

Major Data Controllers (>10,000 Data Subjects)
Up to 2% Gross Revenue or ₦10,000,000

Whichever amount is higher for non-compliance under NDP Act 2023 regulations.

Standard Data Controllers (<10,000 Data Subjects)
Up to 1% Gross Revenue or ₦2,000,000

Whichever amount is higher, plus exposure to potential criminal liability.

Key Features & Functional Capabilities

Operationalise your compliance framework across departments with clear execution tools.

01

Dual-Part Framework

Complete Part 1 to understand statutory obligations, and use Part 2 as your active operational compliance tracker.

02

Role Assignment

Directly enter and assign Responsible Officers for every mandatory compliance requirement.

03

Live Status Tracking

Mark each requirement as Compliant, Non-Compliant, or In Progress using visual controls.

04

Editable PDF Export

Save progress or export while preserving all form fields and selected radio buttons for seamless reporting.

Core Compliance Modules Covered

Comprehensive alignment with all statutory pillars of the Nigeria Data Protection Act 2023.

Governance & Accountability

Board/C-Suite reporting, DPO appointment and independence, NDPC registration, Data Protection Policy implementation, ROPA maintenance, and annual staff training.

Risk & Security Controls

Corporate risk register integration, encryption, anonymisation, pseudonymisation, and continuous information security standard monitoring.

Data Subject Rights & Legal Basis

Map operations across 6 legal bases (Consent, Contract, Vital Interest, Public Interest, Legal Obligation, Legitimate Interest) while honoring all 8 statutory Data Subject rights.

Cross-Border Transfers & Consent

Evaluate foreign country whitelists, secure NDPC Adequacy Decisions, and enforce uncoerced, plain-language consent protocols.

How It Works

Three simple steps to establish board-ready data protection oversight.

1

Review Part 1 Directives

Audit your organisation against the requirements of the Nigeria Data Protection Act 2023 and GAID 2025 Directive.

2

Track Readiness in Part 2

Assign Responsible Officers and update status toggles in real time.

3

Export Board-Ready Reports

Save as a PDF to present compliance evidence to management, auditors, and regulators.

Need Expert Guidance on NDPA & GAID 2025?

Datori Consulting Limited provides specialized data protection compliance advisory, DPO as a service, and regulatory audit representation.

Book a Datori Compliance Advisory Session